Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

How to tutorials for modems, hotspots, dongles
User avatar
Jflex113
Posts: 24
Joined: Thu Mar 15, 2018 2:13 am
Location: Small town in Michigan

Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by Jflex113 » Thu May 03, 2018 4:29 am

This tutorial was originally created by Jim Helms on the original LTE HACKS forum. I have added several commands and explanations to help clarify their use. Feel free to ask questions or suggestions for adding to the list.

TUTORIAL DISCLAIMER: This tutorial is based on using a Windows PC and a Sierra MC7455 modem mounted in a
mPCIE-to-USB adapter. We will be using the a terminal from the Windows device to issue commands to the MC7455
modem. Different devices and methods to issue the AT commands may require various alterations from the
examples below. Always take caution when accessing a modem's interface. This forum, as well as the writer, will
assume NO liability for use of this information. In short, be cautious and use at your own risk.

If you are just getting started with programming the modem, there are three basic utilities required for this
method: Plug the USB modem into your Windows device USB port.

Install the Air Prime Driver Software on the Windows machine via the executable file.

Run the Huawei Terminal executable file as an administrator. When the terminal opens, select the white down
arrow button, and select the COM port that corresponds to the Sierra Wireless…WWAN Modem and hit the Connect
button.

NOTE: If the terminal does not list the Sierra modem, open the Windows device manager (Press the Windows Key +
X then Device Manager) and look at the Ports (COM & LPT) and see on what COM port the modem is located and use
that Port Number.

If you are now connected to the modem through the terminal, go the white outlined slot on the bottom of the
Terminal and type (or copy and paste) the following and hit enter:

Code: Select all

ATI
If the modem is accessible, information will be displayed showing the model, firmware and other details related to
the modem.

If you see these details, congratulations! You are now ready to begin with issuing commands.

Type, or copy and paste (one line at a time) the AT commands that follow and hit Enter after every command.

In our first command we must tell them modem we have permission to enter commands. It is important to
remember that you must first enter this command any time you access the modem to enter various other
commands. It is also used to return more thorough or detailed information when requested.

Code: Select all

at!entercnd="A710"
And, that ALL commands issued to program the modem will take effect ONLY after rebooting the modem:

Code: Select all

at!reset
By default, the MC7455 will be in QMI mode which much be changed to the MBIM mode for various OpenWRT, LEDE, and ROOter frimware builds. (The EM7455’s defaults to the MBIM mode). The AT Commands for the EM|MC7455: for MBIM composition is:

Code: Select all

at!usbcomp=1,1,1009
Other options for the EM|MC7455 modem are for QMI:

Code: Select all

at!usbcomp=1,1,10d
Another option is to expose the NMEA port:

Code: Select all

at!usbcomp=1,1,100d
The EM7465 requires a slightly different command to place it in MBIM (also, PuTTy works best for the EM7465):

Code: Select all

AT!USBCOMP=1,3,1009
To check or verify the mode configuration:

Code: Select all

at!usbcomp?
We will now add the APN (shown in this demo for Sprint as r.ispsn using an ipv4 address).

Code: Select all

at+cgdcont=1,"IP","r.ispsn"
In return we get:

Code: Select all

Send: at+cgdcont?
Recieve: at+cgdcont?
Recieve: +CGDCONT: 1,"IP","r.ispsn","0.0.0.0",0,0,0,0
You may also check what versions of IP settings are available for the modem:

Code: Select all

at+cgdcont=?
Which on the mc7455, returns:

Code: Select all

Recieve: +CGDCONT: (1-24),"IP",,,(0-2),(0-4),(0-1),(0-1)
Recieve: +CGDCONT: (1-24),"PPP",,,(0-2),(0-4),(0-1),(0-1)
Recieve: +CGDCONT: (1-24),"IPV6",,,(0-2),(0-4),(0-1),(0-1)
Recieve: +CGDCONT: (1-24),"IPV4V6",,,(0-2),(0-4),(0-1),(0-1)
This reflects that the mc7455 will allow us to take advantage of Sprint's dual stack IPV4V6 for the APN:

Code: Select all

at+cgdcont=1,"IPV4V6","r.ispsn"
Which returns:

Code: Select all

Recieve: +CGDCONT: 1,"IPV4V6","r.ispsn","0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0",0,0,0,0
If you find that for what ever reason you cannot connect to an IPV6 address and would like to check and see if IPV6 is enabled use the following command:

Code: Select all

At!custom="IPV6ENABLE",1
If you would like to disable IPV6 use this command:

Code: Select all

At!custom="IPV6ENABLE",0
While there are no requirements to do so, we can manually define and set our preferred bands for the modem.
(NOTE: If you are doing a new custom build of LEDE/OpenWRT, I suggest you skip the band programming and/or
locking until the build is up and running properly--the modem will automatically select the bands). But, for this
demo and using Sprint, we can assign each band a reference command which we may later use to lock the modem
to an specific band or group of bands. If you are still in the same terminal session, you can skip the first permission
command.

Code: Select all

at!entercnd="A710"
at!band=0A,"B25",0,0000000001000000
at!band=0B,"B26",0,0000000002000000
at!band=0C,"B41",0,0000010000000000
at!band=0D,"Sprint (All)",0,0000010003000000
Notice that the Sprint (All) band was created by adding together the binaries of the individual bands we selected.
Creating an “All” band holds true for all carriers and bands available to that carrier. Take special notice of
redundant numbered bands and frequencies (when listed) to assure they match those of your carrier.

If you are using a different carrier other than Sprint and want multiple bands combined into one you may find that some of those combine band binaries have letters in them. Here is an example of what that would look like using Verizon:

Code: Select all

at!band=10,"B2",0,0000000000000002
at!band=11,"B4",0,0000000000000008
at!band=12,"B5",0,0000000000000010
at!band=13,"B13",0,0000000000001000
at!band=0E,"VZW (All)",0,000000000000101A
Note: The A at the end of the binary is from combining the 2 and the 8 from bands 2 and 4.

To access what bands are available (and their binaries) we can use the following command:

Code: Select all

at!band=?
If we desire to lock the modem to a particular band, for instance band 41 to take advantage of carrier aggregation:

Code: Select all

at!band=0C
Or we could allow the modem to pick and choose between the Sprint bands in (ALL):

Code: Select all

at!band=0D
To check what bands we are locked to, we can always use the following command:

Code: Select all

at!band?
It is important to always remember what Index letter (i.e., 0c) you have assigned to what band. This is
important when using various scripts by different people who may assign them differently.

If you have created a band and would like to remove that Index letter (i.e., 0c) from the list of available lockable bands, use the following command and insert your index name:

Code: Select all

at!band=**,"",,
For example if you wanted to remove the band 25 index that we created earlier you would use the following command:

Code: Select all

at!band=0A,"",,
If you are having connection issues with the modem, then you may want to avoid locking the bands to any specific
frequency and allow the modem to connect as it wishes:

Code: Select all

at!entercnd="A710"
at!band=00
We can also set the modem to receive LTE only:

Code: Select all

at!selrat=06
Another useful command you will use often, will get the status and general connection information from the
modem such as what band you are currently connected to and signal strength.

Code: Select all

at!gstatus?
The Sierra mc7455/em7455 modem can and will store multiple different carrier firmware (i.e., generic, sprint, verizon,
etc...) which may create connection issues. To review the firmware (and/or preferred carrier) configuration:

Code: Select all

at!gobiimpref?
There may be times were one needs to restore the modem to its OEM configurations. This will effectively reset any changes you have made to the modem's settings.

To restore to OEM settings:

Code: Select all

at!entercnd="A710"

Code: Select all

at!RMARESET=1
Some of the older Sierra Modems (i.e., mc7354, mc7750, mc7700...) may require a slightly different command to
restore:

Code: Select all

at!RMARESET=OEM
or
AT!NVRESTORE=1
After re-powering the modem, you are back to the OEM settings.

I encourage everyone to download a copy of the AT Command reference guide to better understand the various
commands.

I also encourage members to share AT commands they find useful and provide a brief description of when they are
used and what they do.
"If you're going to be ignorant, you'd better be rich." - Cody D.

rxrebel
Posts: 8
Joined: Mon Aug 13, 2018 12:42 pm

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by rxrebel » Tue Aug 14, 2018 6:03 pm

I am using an EM7565 and a WE1026 router on AT&T. When using the command AT!band?, I only see an LTE All option, with no list of bands. I would like to define Band 66 for testing, but I do not understand how I get the 16 digit band mask. I have only seen Sprint and Verizon examples so far. Thanks!

User avatar
JimHelms
Site Admin
Posts: 274
Joined: Tue Dec 19, 2017 8:59 pm
Location: DFW Texas
Contact:

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by JimHelms » Tue Aug 14, 2018 6:25 pm

Try these using all caps:

Code: Select all

AT!ENTERCND="A710"
AT!BAND=?

User avatar
Jflex113
Posts: 24
Joined: Thu Mar 15, 2018 2:13 am
Location: Small town in Michigan

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by Jflex113 » Tue Aug 14, 2018 6:44 pm

As Jim said if you don't use the at!entercnd="A710" first then it won't show you the 16 digit band mask. You just want band 66 only for the band you are trying to lock to?
"If you're going to be ignorant, you'd better be rich." - Cody D.

rxrebel
Posts: 8
Joined: Mon Aug 13, 2018 12:42 pm

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by rxrebel » Tue Aug 14, 2018 7:30 pm

Correct. Currently, I am aggregating bands 2, 30, and 5. I have great signal on 2 and 30, but I am not seeing 66. I know that my tower has it, because my S8 picks it up. I was wanting to lock to it and see how it performed. If that worked, I was contemplating disabling 30 and seeing if I could aggregate 66 and 2, as 66 is 15 mhz and less congested.

rxrebel
Posts: 8
Joined: Mon Aug 13, 2018 12:42 pm

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by rxrebel » Tue Aug 14, 2018 7:33 pm

This is what I see trying the above commands:

Code: Select all

AT!BAND?
Index, Name,                        GW Band Mask     L Band Mask 1    TDS Band Mask    L Band Mask 2    L Band Mask 3    L Band Mask 4
00, All bands                     100600000EC00000 00002100BA0E19DF 0000000000000000 0000000000000002 0000000000000000 0000000000000000

OK
Sorry for the formatting.

User avatar
Jflex113
Posts: 24
Joined: Thu Mar 15, 2018 2:13 am
Location: Small town in Michigan

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by Jflex113 » Tue Aug 14, 2018 7:53 pm

Give me a few and I can give you a copy for the em7565 of all the band masks
"If you're going to be ignorant, you'd better be rich." - Cody D.

rxrebel
Posts: 8
Joined: Mon Aug 13, 2018 12:42 pm

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by rxrebel » Tue Aug 14, 2018 7:58 pm

Thanks!

User avatar
Jflex113
Posts: 24
Joined: Thu Mar 15, 2018 2:13 am
Location: Small town in Michigan

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by Jflex113 » Tue Aug 14, 2018 8:10 pm

Here is all the 16 digit band masks for the EM7565. For a band 66 lock you would enter:

Code: Select all

at!entercnd="A710"
at!band=0A,"B 66",0,0,0000000000000002

Code: Select all

at!band=?
Index, Name,                        GW Band Mask     L Band Mask 1    L Band Mask 2    TDS Band Mask    L Band Mask 3    L Band Mask 4
00, All bands                     100600000FC00000 0000A700BA0F19DF 0000000000000002 0000000000000000 0000000000000000 4800000000000000
01, Europe 3G                     0002000000400000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
02, North America 3G              0000000004800000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
06, Europe                        0002000000400000 00000000000801C5 0000000000000000 0000000000000000 0000000000000000 0000000000000000
07, North America                 0000000004800000 000001000201185A 0000000000000002 0000000000000000 0000000000000000 0000000000000000
08, WCDMA ALL                     100600000FC00000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
09, LTE ALL                       0000000000000000 0000A700BA0F19DF 0000000000000002 0000000000000000 0000000000000000 4800000000000000
0A, B2                            0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 0000000000000000
0B, B4                            0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000000 0000000000000000
0C, B12                           0000000000000000 0000000000000800 0000000000000000 0000000000000000 0000000000000000 0000000000000000
0D, B66                           0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000
0E, T-Mobile (All)                0000000000000000 000000000000080A 0000000000000002 0000000000000000 0000000000000000 0000000000000000
10, Sprint (All)                  0000000000000000 0000010002000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000

                                                                                                                       4000000000000000 - B255   
                                                                                                                       0800000000000000 - B252   
                                                                    0000000000000002 - B66    
                                                   0000800000000000 - B48    
                                                   0000200000000000 - B46    
                                                   0000040000000000 - B43    
                                                   0000020000000000 - B42    
                                                   0000010000000000 - B41    
                                                   0000000080000000 - B32    
                                                   0000000020000000 - B30    
                                                   0000000010000000 - B29    
                                                   0000000008000000 - B28    
                                                   0000000002000000 - B26    
                                                   0000000000080000 - B20    
                                                   0000000000040000 - B19    
                                                   0000000000020000 - B18    
                                                   0000000000010000 - B17    
                                                   0000000000001000 - B13    
                                                   0000000000000800 - B12    
                                                   0000000000000100 - B9     
                                                   0000000000000080 - B8     
                                                   0000000000000040 - B7     
                                                   0000000000000010 - B5     
                                                   0000000000000008 - B4     
                                                   0000000000000004 - B3     
                                                   0000000000000002 - B2     
                                                   0000000000000001 - B1     
                                  1000000000000000 - B19 (850)
                                  0004000000000000 - B9 (1700)
                                  0002000000000000 - B8  (900)
                                  0000000008000000 - B6  (800)
                                  0000000004000000 - B5  (850)
                                  0000000002000000 - B4 (1700)
                                  0000000001000000 - B3 (1700)
                                  0000000000800000 - B2 (1900)
                                  0000000000400000 - B1 (2100)

OK
"If you're going to be ignorant, you'd better be rich." - Cody D.

rxrebel
Posts: 8
Joined: Mon Aug 13, 2018 12:42 pm

Re: Sierra Wireless MC7455 | EM7455 -- AT! Command Guide

Post by rxrebel » Tue Aug 14, 2018 8:23 pm

Thanks! I'll give it a shot in a little while.

Post Reply